# 檢查版本
node -v
npm -v
# 如未安裝，推薦使用 nvm 管理 Node.js 版本
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash
source ~/.bashrc
nvm install 18-lts
nvm use 18-lts

# 使用 npm
npm install
# 使用 yarn
yarn install
# 使用 pnpm（推薦）
pnpm install

# 生產(chǎn)環(huán)境API地址
VITE_API_BASE_URL = https://api.yourdomain.com
# 應(yīng)用標(biāo)題
VITE_APP_TITLE = 生產(chǎn)環(huán)境
# 公共路徑
VITE_PUBLIC_PATH = /

# Vite 項(xiàng)目（Vue3 默認(rèn)）
npm run build
# Webpack 項(xiàng)目（Vue CLI 創(chuàng)建）
npm run build

import { defineConfig } from 'vite'
import vue from '@vitejs/plugin-vue'
export default defineConfig({
  plugins: [vue()],
  // 生產(chǎn)環(huán)境基礎(chǔ)路徑，部署到子目錄時(shí)需要修改
  base: '/',
  build: {
    // 輸出目錄
    outDir: 'dist',
    // 靜態(tài)資源目錄
    assetsDir: 'assets',
    // 小于此閾值的資源內(nèi)聯(lián)為 base64
    assetsInlineLimit: 4096,
    // 構(gòu)建后是否生成 source map
    sourcemap: false,
    // 代碼壓縮配置
    minify: 'terser',
    terserOptions: {
      compress: {
        // 生產(chǎn)環(huán)境移除 console
        drop_console: true,
        // 生產(chǎn)環(huán)境移除 debugger
        drop_debugger: true
      }
    },
    // 拆包策略優(yōu)化
    rollupOptions: {
      output: {
        chunkFileNames: 'js/[name]-[hash].js',
        entryFileNames: 'js/[name]-[hash].js',
        assetFileNames: '[ext]/[name]-[hash].[ext]',
        manualChunks(id) {
          // 將 node_modules 單獨(dú)打包
          if (id.includes('node_modules')) {
            return 'vendor'
          }
        }
      }
    }
  },
  // 開發(fā)服務(wù)器配置（僅開發(fā)時(shí)使用）
  server: {
    port: 3000,
    proxy: {
      '/api': {
        target: 'http://localhost:8080',
        changeOrigin: true
      }
    }
  }
})

const { defineConfig } = require('@vue/cli-service')
module.exports = defineConfig({
  transpileDependencies: true,
  // 生產(chǎn)環(huán)境路徑
  publicPath: '/',
  // 輸出目錄
  outputDir: 'dist',
  // 靜態(tài)資源目錄
  assetsDir: 'assets',
  // 生產(chǎn)環(huán)境不生成 sourceMap
  productionSourceMap: false,
  // Webpack 配置
  configureWebpack: {
    optimization: {
      minimizer: [
        require('terser-webpack-plugin')({
          terserOptions: {
            compress: {
              drop_console: true,
              drop_debugger: true
            }
          }
        })
      ]
    }
  },
  // 開發(fā)代理
  devServer: {
    proxy: {
      '/api': {
        target: 'http://localhost:8080',
        changeOrigin: true
      }
    }
  }
})

dist/
├── index.html              # 入口HTML文件
├── favicon.ico             # 網(wǎng)站圖標(biāo)
├── assets/                 # 靜態(tài)資源目錄
│   ├── css/
│   │   └── index-[hash].css    # 樣式文件
│   ├── js/
│   │   ├── index-[hash].js     # 入口JS
│   │   └── vendor-[hash].js    # 第三方依賴
│   └── img/                 # 圖片資源
└── robots.txt              # 搜索引擎規(guī)則（可選）

# 本地預(yù)覽打包結(jié)果
npm run preview
# 或使用 http-server
npm install -g http-server
cd dist
http-server -p 8080

# 基本語(yǔ)法：scp [參數(shù)] 本地文件 遠(yuǎn)程用戶@遠(yuǎn)程IP:遠(yuǎn)程路徑
# 上傳整個(gè) dist 目錄到服務(wù)器
scp -r ./dist/* root@192.168.1.100:/var/www/vue3-project/
# 指定端口（如果SSH端口不是22）
scp -P 2222 -r ./dist/* root@192.168.1.100:/var/www/vue3-project/
# 顯示傳輸進(jìn)度
scp -rv ./dist/* root@192.168.1.100:/var/www/vue3-project/

# CentOS
yum install -y rsync
# Ubuntu
apt install -y rsync

# 增量同步 dist 目錄到服務(wù)器（推薦）
rsync -avzP --delete ./dist/ root@192.168.1.100:/var/www/vue3-project/
# 參數(shù)說明：
# -a: 歸檔模式，保留權(quán)限、時(shí)間等屬性
# -v: 顯示詳細(xì)信息
# -z: 傳輸時(shí)壓縮
# -P: 顯示進(jìn)度 + 斷點(diǎn)續(xù)傳
# --delete: 刪除目標(biāo)目錄中源目錄不存在的文件（重要?。?
# 指定SSH端口
rsync -avzP -e "ssh -p 2222" ./dist/ root@192.168.1.100:/var/www/vue3-project/
# 排除某些文件
rsync -avzP --exclude="*.map" ./dist/ root@192.168.1.100:/var/www/vue3-project/

# 安裝 EPEL 源
yum install -y epel-release
# 安裝 Nginx
yum install -y nginx
# 啟動(dòng)并設(shè)置開機(jī)自啟
systemctl start nginx
systemctl enable nginx
# 檢查狀態(tài)
systemctl status nginx

apt update
apt install -y nginx
systemctl start nginx
systemctl enable nginx

# 安裝依賴
yum install -y gcc gcc-c++ make zlib-devel pcre-devel openssl-devel
# 下載源碼
cd /usr/local/src
wget http://nginx.org/download/nginx-1.24.0.tar.gz
tar zxf nginx-1.24.0.tar.gz
cd nginx-1.24.0
# 編譯配置（包含常用模塊）
./configure \
  --prefix=/usr/local/nginx \
  --with-http_ssl_module \
  --with-http_v2_module \
  --with-http_gzip_static_module \
  --with-http_stub_status_module \
  --with-stream
# 編譯安裝
make && make install
# 創(chuàng)建 systemd 服務(wù)
# （略，可參考官方文檔）

user nginx;
worker_processes auto;
worker_cpu_affinity auto;
worker_rlimit_nofile 65535;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
    use epoll;
    worker_connections 65535;
    multi_accept on;
}
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    # 日志格式
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for" '
                    '$request_time $upstream_response_time';
    access_log /var/log/nginx/access.log main;
    # 核心優(yōu)化
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    keepalive_requests 1000;
    types_hash_max_size 2048;
    server_names_hash_bucket_size 128;
    client_max_body_size 50M;
    # Gzip 壓縮配置
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_types
        text/plain
        text/css
        text/xml
        text/javascript
        application/json
        application/javascript
        application/xml+rss
        application/xhtml+xml
        application/x-font-ttf
        font/opentype
        image/svg+xml
        image/x-icon;
    gzip_min_length 1k;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_disable "MSIE [1-6]\.";
    # 虛擬主機(jī)配置
    include /etc/nginx/conf.d/*.conf;
}

server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;
    root /var/www/vue3-project;
    index index.html;
    # 字符集
    charset utf-8;
    # ==========================================
    # 【關(guān)鍵配置】Vue Router History 模式支持
    # ==========================================
    # 原理：所有請(qǐng)求都重定向到 index.html，由前端路由處理
    # 如果不配置，刷新頁(yè)面會(huì)出現(xiàn) 404 錯(cuò)誤
    location / {
        try_files $uri $uri/ /index.html;
    }
    # ==========================================
    # 靜態(tài)資源緩存策略
    # ==========================================
    # 帶 hash 的資源（js、css）永久緩存
    location ~* \.(js|css)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        add_header Vary Accept-Encoding;
    }
    # 圖片、字體、媒體資源緩存
    location ~* \.(jpg|jpeg|png|gif|ico|svg|woff|woff2|ttf|eot)$ {
        expires 30d;
        add_header Cache-Control "public";
    }
    # html 不緩存（每次都檢查更新）
    location ~* \.html$ {
        expires -1;
        add_header Cache-Control "no-cache, no-store, must-revalidate";
    }
    # ==========================================
    # 反向代理解決跨域問題
    # ==========================================
    location /api/ {
        proxy_pass http://127.0.0.1:8080/;  # 后端服務(wù)地址
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        # 超時(shí)設(shè)置
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        # WebSocket 支持（如需要）
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
    # ==========================================
    # 安全頭配置
    # ==========================================
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    # ==========================================
    # 隱藏敏感文件
    # ==========================================
    location ~ /\. {
        deny all;
        access_log off;
        log_not_found off;
    }
    location ~ ~$ {
        deny all;
        access_log off;
        log_not_found off;
    }
}

# HTTP 強(qiáng)制跳轉(zhuǎn) HTTPS
server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;
    return 301 https://$server_name$request_uri;
}
# HTTPS 服務(wù)
server {
    listen 443 ssl http2;
    server_name yourdomain.com www.yourdomain.com;
    root /var/www/vue3-project;
    index index.html;
    # SSL 證書配置
    ssl_certificate /etc/nginx/ssl/yourdomain.com.pem;
    ssl_certificate_key /etc/nginx/ssl/yourdomain.com.key;
    # SSL 優(yōu)化配置
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    ssl_session_tickets off;
    # HSTS（開啟后用戶瀏覽器強(qiáng)制使用HTTPS）
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    charset utf-8;
    # History 模式支持
    location / {
        try_files $uri $uri/ /index.html;
    }
    # 靜態(tài)資源緩存（同上，省略）
    # 反向代理（同上，省略）
    # 安全頭（同上，省略）
}

# 檢查配置文件語(yǔ)法
nginx -t
# 重載配置（不中斷服務(wù)）
nginx -s reload
# 重啟 Nginx
systemctl restart nginx
# 查看運(yùn)行狀態(tài)
systemctl status nginx
# 查看錯(cuò)誤日志
tail -f /var/log/nginx/error.log
# 查看訪問日志
tail -f /var/log/nginx/access.log

# CentOS 安裝 Docker
yum install -y yum-utils
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
yum install -y docker-ce docker-ce-cli containerd.io
# 啟動(dòng) Docker
systemctl start docker
systemctl enable docker
# 安裝 docker-compose
curl -L "https://github.com/docker/compose/releases/download/v2.20.0/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

# ==========================================
# 第一階段：構(gòu)建階段（僅用于編譯打包）
# ==========================================
FROM node:18-alpine AS builder
# 設(shè)置工作目錄
WORKDIR /app
# 先復(fù)制依賴文件，利用 Docker 緩存
COPY package*.json ./
COPY pnpm-lock.yaml* ./
COPY yarn.lock* ./
# 安裝依賴（根據(jù)項(xiàng)目使用的包管理器選擇）
RUN npm config set registry https://registry.npmmirror.com && \
    npm install
# 復(fù)制項(xiàng)目源碼
COPY . .
# 執(zhí)行構(gòu)建
RUN npm run build
# ==========================================
# 第二階段：運(yùn)行階段（僅包含 Nginx 和構(gòu)建產(chǎn)物）
# ==========================================
FROM nginx:1.24-alpine
# 設(shè)置時(shí)區(qū)
RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
    echo "Asia/Shanghai" > /etc/timezone
# 從構(gòu)建階段復(fù)制打包產(chǎn)物
COPY --from=builder /app/dist /usr/share/nginx/html
# 復(fù)制自定義 Nginx 配置
COPY nginx.conf /etc/nginx/conf.d/default.conf
# 暴露端口
EXPOSE 80
# 啟動(dòng) Nginx
CMD ["nginx", "-g", "daemon off;"]

server {
    listen 80;
    server_name localhost;
    root /usr/share/nginx/html;
    index index.html;
    charset utf-8;
    # History 模式支持
    location / {
        try_files $uri $uri/ /index.html;
    }
    # 靜態(tài)資源緩存
    location ~* \.(js|css)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
    }
    location ~* \.(jpg|jpeg|png|gif|ico|svg|woff|woff2|ttf)$ {
        expires 30d;
        add_header Cache-Control "public";
    }
    location ~* \.html$ {
        expires -1;
        add_header Cache-Control "no-cache, no-store, must-revalidate";
    }
    # 反向代理（如需要）
    location /api/ {
        proxy_pass http://backend:8080/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    # Gzip 壓縮
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_types text/plain text/css text/javascript application/json application/javascript;
}

version: '3.8'
services:
  # Vue3 前端服務(wù)
  web:
    build: .
    container_name: vue3-web
    restart: always
    ports:
      - "80:80"
      - "443:443"  # 如需HTTPS
    volumes:
      # 掛載 SSL 證書（如需HTTPS）
      - ./ssl:/etc/nginx/ssl
      # 掛載日志目錄
      - ./logs/nginx:/var/log/nginx
    networks:
      - app-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost"]
      interval: 30s
      timeout: 10s
      retries: 3
  # 后端服務(wù)（如需要）
  backend:
    image: your-backend-image:latest
    container_name: vue3-backend
    restart: always
    ports:
      - "8080:8080"
    networks:
      - app-network
networks:
  app-network:
    driver: bridge

# 構(gòu)建并啟動(dòng)
docker-compose up -d --build
# 查看日志
docker-compose logs -f web
# 查看運(yùn)行狀態(tài)
docker-compose ps
# 停止服務(wù)
docker-compose down
# 重啟服務(wù)
docker-compose restart web
# 進(jìn)入容器
docker exec -it vue3-web sh

#!/bin/bash
set -e
# ==========================================
# Vue3 項(xiàng)目自動(dòng)化部署腳本
# 功能：本地構(gòu)建 -> 備份 -> 上傳 -> 部署 -> 回滾支持
# ==========================================
# ==================== 配置項(xiàng) ====================
PROJECT_NAME="vue3-project"
LOCAL_DIST_PATH="./dist"
REMOTE_USER="root"
REMOTE_HOST="192.168.1.100"
REMOTE_PORT="22"
REMOTE_BASE_PATH="/var/www/${PROJECT_NAME}"
BACKUP_KEEP_COUNT=5  # 保留備份數(shù)量
# ================================================
# 顏色輸出
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'
log_info() {
    echo -e "${GREEN}[INFO]${NC} $1"
}
log_warn() {
    echo -e "${YELLOW}[WARN]${NC} $1"
}
log_error() {
    echo -e "${RED}[ERROR]${NC} $1"
}
# 步驟1：本地構(gòu)建
build() {
    log_info "開始本地構(gòu)建..."
    npm run build
    if [ ! -d "$LOCAL_DIST_PATH" ]; then
        log_error "構(gòu)建失敗，dist 目錄不存在"
        exit 1
    fi
    log_info "構(gòu)建完成"
}
# 步驟2：備份當(dāng)前版本
backup() {
    log_info "備份當(dāng)前版本..."
    local timestamp=$(date +%Y%m%d_%H%M%S)
    local backup_path="${REMOTE_BASE_PATH}/backup/${timestamp}"
    ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST << EOF
        mkdir -p ${REMOTE_BASE_PATH}/backup
        if [ -d "${REMOTE_BASE_PATH}/current" ]; then
            cp -r ${REMOTE_BASE_PATH}/current $backup_path
            log_info "備份完成: $backup_path"
        fi
EOF
}
# 步驟3：清理舊備份
cleanup_backups() {
    log_info "清理舊備份，保留最近 ${BACKUP_KEEP_COUNT} 個(gè)..."
    ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST << EOF
        cd ${REMOTE_BASE_PATH}/backup
        ls -t | tail -n +\$((BACKUP_KEEP_COUNT + 1)) | xargs rm -rf
EOF
}
# 步驟4：上傳新文件
upload() {
    log_info "上傳新文件到服務(wù)器..."
    ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST "mkdir -p ${REMOTE_BASE_PATH}/releases"
    local release_name=$(date +%Y%m%d_%H%M%S)
    local remote_release_path="${REMOTE_BASE_PATH}/releases/${release_name}"
    ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST "mkdir -p $remote_release_path"
    rsync -avzP --delete \
        -e "ssh -p $REMOTE_PORT" \
        ${LOCAL_DIST_PATH}/ \
        ${REMOTE_USER}@${REMOTE_HOST}:${remote_release_path}/
    echo $release_name
}
# 步驟5：切換到新版本
switch_version() {
    local release_name=$1
    log_info "切換到新版本: $release_name"
    ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST << EOF
        # 創(chuàng)建軟鏈接指向新版本
        ln -sfn ${REMOTE_BASE_PATH}/releases/${release_name} ${REMOTE_BASE_PATH}/current
        echo "版本切換完成"
EOF
}
# 回滾功能
rollback() {
    log_info "開始回滾..."
    local previous_version=$(ssh -p $REMOTE_PORT $REMOTE_USER@$REMOTE_HOST "
        ls -t ${REMOTE_BASE_PATH}/releases | sed -n '2p'
    ")
    if [ -z "$previous_version" ]; then
        log_error "沒有可回滾的版本"
        exit 1
    fi
    log_warn "回滾到版本: $previous_version"
    switch_version $previous_version
    log_info "回滾完成"
}
# 主流程
main() {
    case "${1:-deploy}" in
        deploy)
            log_info "========== 開始部署 =========="
            build
            backup
            local release_name=$(upload)
            switch_version $release_name
            cleanup_backups
            log_info "========== 部署成功 =========="
            ;;
        rollback)
            rollback
            ;;
        build)
            build
            ;;
        *)
            echo "用法: $0 [deploy|rollback|build]"
            exit 1
            ;;
    esac
}
main "$@"

# 添加執(zhí)行權(quán)限
chmod +x deploy.sh
# 完整部署
./deploy.sh deploy
# 回滾到上一個(gè)版本
./deploy.sh rollback
# 僅本地構(gòu)建
./deploy.sh build

name: Deploy to Production
on:
  push:
    branches: [ main ]
jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Setup Node.js
      uses: actions/setup-node@v3
      with:
        node-version: '18'
        cache: 'npm'
    - name: Install dependencies
      run: npm ci
    - name: Build
      run: npm run build
    - name: Deploy to server
      uses: easingthemes/ssh-deploy@main
      with:
        SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
        ARGS: "-avzP --delete"
        SOURCE: "dist/"
        REMOTE_HOST: ${{ secrets.REMOTE_HOST }}
        REMOTE_USER: ${{ secrets.REMOTE_USER }}
        TARGET: /var/www/vue3-project/current/

location / {
    try_files $uri $uri/ /index.html;
}

location /api/ {
    proxy_pass http://backend-server:8080/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
}

// Spring Boot 示例
@CrossOrigin(origins = "https://yourdomain.com")

# 1. 檢查文件是否存在
ls -la /var/www/vue3-project/assets/
# 2. 檢查文件權(quán)限
chown -R nginx:nginx /var/www/vue3-project/
chmod -R 755 /var/www/vue3-project/
# 3. 檢查 Nginx 配置的 root 路徑是否正確
# 4. 檢查 vite.config.js 中的 base 配置

# 檢查證書是否匹配
openssl x509 -noout -subject -in /etc/nginx/ssl/cert.pem
openssl rsa -noout -check -in /etc/nginx/ssl/key.pem
# 檢查證書有效期
openssl x509 -noout -dates -in /etc/nginx/ssl/cert.pem
# 測(cè)試 HTTPS 連接
curl -v https://yourdomain.com

# 檢查響應(yīng)頭是否包含 Content-Encoding: gzip
curl -I -H "Accept-Encoding: gzip" https://yourdomain.com/assets/index.js

# 系統(tǒng)參數(shù)優(yōu)化（/etc/sysctl.conf）
net.core.somaxconn = 65535
net.core.netdev_max_backlog = 5000
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_tw_reuse = 1
# 文件句柄限制（/etc/security/limits.conf）
nginx soft nofile 65535
nginx hard nofile 65535

/var/www/vue3-project/
├── current -> releases/20240101_120000/  # 當(dāng)前版本軟鏈接
├── releases/                             # 歷史版本目錄
│   ├── 20240101_120000/
│   ├── 20240102_153000/
│   └── ...
├── backup/                               # 備份目錄
├── shared/                               # 共享文件（如配置）
└── logs/                                 # 日志目錄

# 創(chuàng)建專用運(yùn)行用戶
useradd -r -s /sbin/nologin www
# 設(shè)置目錄權(quán)限
chown -R www:www /var/www/vue3-project/
chmod -R 755 /var/www/vue3-project/
chmod 644 /var/www/vue3-project/current/index.html
# Nginx 運(yùn)行用戶改為 www
# 修改 /etc/nginx/nginx.conf: user www;

/var/log/nginx/*.log {
    daily
    missingok
    rotate 30
    compress
    delaycompress
    notifempty
    create 0640 www adm
    sharedscripts
    postrotate
        [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
    endscript
}

# nginx.conf http 塊中添加
server_tokens off;

# 只開放必要端口
firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --permanent --add-service=ssh
firewall-cmd --reload

yum install -y fail2ban
systemctl start fail2ban
systemctl enable fail2ban

yum update -y
# 或
apt update && apt upgrade -y

#!/bin/bash
# check_nginx.sh
NGINX_STATUS=$(systemctl is-active nginx)
if [ "$NGINX_STATUS" != "active" ]; then
    echo "Nginx 服務(wù)異常！" | mail -s "告警：Nginx 服務(wù)停止" admin@yourdomain.com
    systemctl restart nginx
fi
# 檢查磁盤使用率
DISK_USAGE=$(df / | awk 'NR==2 {print $5}' | sed 's/%//')
if [ $DISK_USAGE -gt 80 ]; then
    echo "磁盤使用率超過 80%，當(dāng)前：${DISK_USAGE}%" | mail -s "告警：磁盤空間不足" admin@yourdomain.com
fi

# 灰度發(fā)布配置示例
upstream web_servers {
    server 127.0.0.1:8081 weight=9;  # 舊版本 90% 流量
    server 127.0.0.1:8082 weight=1;  # 新版本 10% 流量
}

本地開發(fā) → npm run build → rsync 增量上傳 → Nginx 配置 → 測(cè)試驗(yàn)證 → 監(jiān)控告警